CVE-2005-4144

CVE-2005-4144 affects Lyris ListManager 5.0–8.9a. The vulnerability arises from improper handling of whitespace in the orderby parameter, allowing remote attackers to modify SQL queries by injecting ORDER BY clauses (e.g., via newlines or 0xFF characters). Documents consistently identify this as ...